Master Guide 200 v1 1

28
Master Guide Document Version: 1.1 – 2013-08-23 PUBLIC SAP Screen Personas 2.0

description

Master Guide 200 v1 1

Transcript of Master Guide 200 v1 1

  • Master Guide

    Document Version: 1.1 2013-08-23

    PUBLIC

    SAP Screen Personas 2.0

  • 2PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Typographic Conventions

    Typographic Conventions

    Type Style Description

    Example Words or characters quoted from the screen. These include field names, screen titles,pushbuttons labels, menu names, menu paths, and menu options.Textual cross-references to other documents.

    Example Emphasized words or expressions.

    EXAMPLE Technical names of system objects. These include report names, program names,transaction codes, table names, and key concepts of a programming language when theyare surrounded by body text, for example, SELECT and INCLUDE.

    Example Output on the screen. This includes file and directory names and their paths, messages,names of variables and parameters, source text, and names of installation, upgrade anddatabase tools.

    Example Exact user entry. These are words or characters that you enter in the system exactly as theyappear in the documentation.

    Variable user entry. Angle brackets indicate that you replace these words and characterswith appropriate entries to make entries in the system.

    EXAMPLE Keys on the keyboard, for example, F2 or ENTER .

  • SAP Screen Personas 2.0Document History

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 3

    Document History

    Version Date Change

    1.0 2013-07-31 First release

    1.1 2013-08-23 Authorization and Role information included

  • 4PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Table of Contents

    Table of Contents

    1 Getting Started ........................................................................................................................................ 51.1 About this Document .............................................................................................................................................. 51.2 Related Information ................................................................................................................................................. 6

    1.2.1 Planning Information .............................................................................................................................. 61.2.2 Further Useful Links ................................................................................................................................ 71.2.3 Related Master Guides ........................................................................................................................... 7

    1.3 Important SAP Notes .............................................................................................................................................. 8

    2 Solution Overview ....................................................................................................................................92.1 Software Units of SAP Screen Personas 2.0 ........................................................................................................ 92.2 System Landscape ................................................................................................................................................ 10

    2.2.1 SAP Screen Personas based on Silverlight......................................................................................... 102.2.2 SAP Screen Personas based on HTML ................................................................................................ 11

    2.3 Authorization and Role Concepts - Silverlight .................................................................................................... 122.4 Authorization and Role Concepts - HTML ........................................................................................................... 16

    2.4.1 Role Creation using PFCG .................................................................................................................... 162.5 Overall Implementation Sequence ....................................................................................................................... 18

    3 Business Scenarios of SAP Screen Personas 2.0 ................................................................................ 193.1 UI Customization ................................................................................................................................................... 19

    4 Solution-Wide Topics ............................................................................................................................ 20

    5 Security Considerations ........................................................................................................................ 215.1 Fundamental Security Guides .............................................................................................................................. 215.2 Security-Relevant Logging and Tracing .............................................................................................................. 215.3 Dispensable Functions with Impacts on Security ............................................................................................... 21

    6 Operations Information ......................................................................................................................... 226.1 Administration and Management ........................................................................................................................ 22

    6.1.1 Periodic Tasks ....................................................................................................................................... 226.1.2 User Management ................................................................................................................................. 22

    6.2 Software Change Management ............................................................................................................................ 23

    7 References ............................................................................................................................................. 24

    8 Media List ............................................................................................................................................... 25

    9 Release Availability Information .......................................................................................................... 26

  • SAP Screen Personas 2.0Getting Started

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 5

    1 Getting Started

    1.1 About this Document

    Purpose

    This Master Guide is the central starting point for the technical implementation of the SAP Screen Personassolution. You can find cross-scenario implementation information as well as scenario-specific information in thisguide.

    NoteThe central starting point for the technical upgrade of your SAP solution is the Master Guide, which youcan find on SAP Service Marketplace at http://service.sap.com/instguides.

    Use the Master Guide to get an overview of SAP Screen Personas, its software units, and its scenarios from atechnical perspective. The Master Guide is a planning tool that helps you to design your system landscape. Itrefers you to the required detailed documentation, mainly:x Installation guides for single software unitsx SAP Notesx Configuration documentationx SAP Library documentation

    The Master Guide consists of the following main sections:x Section 1, Getting Started

    This section explains how to use this document and related information (documentation and SAP Notes) thatis crucial to the installation of the solution.

    x Section 2, Solution OverviewThis section provides essential information about the supported scenarios, the installable software units, thesoftware component matrix, and how to plan your system landscape.

    x Section 3, Business Scenarios of SAPThis section contains information about the supported business scenarios and processes. This section alsoprovides links to the relevant configuration documentation that is provided via SAP Solution Manager.

    x Section 4, Solution-Wide TopicsThis section contains information about the Solution Manager content for the solution.

    x Section 5, Security ConsiderationsThis section provides an overview of the security considerations that are specific to the SAP Screen Personassolution.

    x Section 7, ReferencesThis section lists of the SAP Notes and documents that are mentioned in this Master Guide.

    x Section 8, Media ListThis section contains information about where to find the software and documentation download packages.

  • 6PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Getting Started

    x Section 9, Release Availability InformationThis section contains information about the available software releases, required base software, and otheravailabilities regarding SAP Screen Personas.

    NoteYou can find the most current information about the technical implementation of SAP Screen Personasand the latest installation and configuration guides on SAP Service Marketplace athttp://service.sap.com/instguides.We strongly recommend that you use the documents available here. The guides are regularly updated.

    Constraints

    x The business scenarios that are presented here serve as examples of how you can use SAP software in yourcompany. The business scenarios are only intended as models and do not necessarily run the way they aredescribed here in your customer-specific system landscape. Ensure to check your requirements and systemsto determine whether these scenarios can be used productively at your site. Furthermore, we recommendthat you test these scenarios thoroughly in your test systems to ensure they are complete and free of errorsbefore going live.

    x This Master Guide primarily discusses the overall technical implementation of SAP Screen Personas ratherthan its subordinate components. This means that additional software dependencies might exist withoutbeing mentioned explicitly in this document. You can find more information on component-specific softwaredependencies in the corresponding installation guides.

    1.2 Related Information

    1.2.1 Planning Information

    For more information about planning topics not covered in this guide, see the following content on SAP ServiceMarketplace:

    Content Location on SAP Service Marketplace

    Latest versions of installation and upgradeguides

    http://service.sap.com/instguides

    General information about SAP ScreenPersonas (for example, guide documentssuch as Master Guide and ApplicationOperations Guide)

    http://service.sap.com/instguideso Focused Business Solutionso SAP Screen Personaso SAP Screen Personas 2.0

    Application help for SAP Screen Personas http://help.sap.com/personas

    SAP Business Maps - information aboutapplications and business scenarios

    http://service.sap.com/businessmaps

  • SAP Screen Personas 2.0Getting Started

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 7

    Content Location on SAP Service Marketplace

    Sizing, calculation of hardwarerequirements - such as CPU, disk andmemory resource - with the Quick Sizertool

    http://service.sap.com/quicksizer

    Released platforms and technology-related topics such as maintenancestrategies and language support

    http://service.sap.com/platformsTo access the Platform Availability Matrix directly,enterhttp://service.sap.com/pam

    Network security http://service.sap.com/securityguide

    High Availability http://scn.sap.com/docs/DOC-7848

    Performance http://service.sap.com/performance

    Information about Support PackageStacks, latest software versions and patchlevel requirements

    http://service.sap.com/sp-stacks

    Information about Unicode technology http://scn.sap.com/community/internationalization-and-unicode

    1.2.2 Further Useful Links

    The following table lists further useful links on SAP Service Marketplace:

    Content Location on SAP Service Marketplace

    Information about creating error messages http://service.sap.com/message

    SAP Notes search http://service.sap.com/notes

    SAP Software Distribution Center (softwaredownload and ordering of software)

    http://service.sap.com/swdc

    SAP Online Knowledge Products (OKPs) role-specific Learning Maps

    http://service.sap.com/rkt

    1.2.3 Related Master Guides

    This Master Guide is based on Master Guides for cross-industry applications. You can find more informationabout the relevant applications in the following documents:

    Title Location

    Master Guide - SAP ERP 6.0 http://service.sap.com/instguides

  • 8PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Getting Started

    Title Location

    o SAP Business Suite Applicationso SAP ERPo SAP ERP 6.0o Planning

    SAP NetWeaver http://service.sap.com/instguideso SAP NetWeavero SAP NetWeaver 7.4o Planning

    1.3 Important SAP Notes

    You must read the following SAP Notes before you start the installation. These SAP Notes contain the most recentinformation on the installation, as well as corrections to the installation documentation.Make sure that you have the up-to-date version of each SAP Note, which you can find on SAP Service Marketplaceat http://service.sap.com/notes.

    SAP Note Number Title Description

    1776739 Installation Note for SAPScreen Personas 2.0

    This note lists the Prerequisitesand related details aboutInstalling SAP Screen Personas2.0.

    1848339 Installation and Upgrade notefor SAP Screen Personas(Silverlight)

    This note contains informationon the steps for installing andgetting started for both newand existing customers.

    1885334 Feature List for Silverlight This note contains informationrelated to the modificationsmade to some of the features inSAP Screen PersonasSilverlight 2.0.

  • SAP Screen Personas 2.0Solution Overview

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 9

    2 Solution Overview

    SAP Screen Personas 2.0 has two components namely, SAP Screen Personas based on Silverlight and SAPScreen Personas based on HTML.SAP Screen Personas based on Silverlight provides a simple, drag and drop approach to personalize SAP GUIscreens to make them more usable as well as more visually appealing making use of existing DynPro businesslogic and without any additional programming. It allows creating flavors for transactions; group them into logicalgroups, and assign them to different user groups of the enterprise. The solution provides means to define systemlandscape, so that flavor maintenance for GUI screens in SAP transactions that span across multiple systems canbe administered centrally.SAP Screen Personas based on HTML provides the flexibility to customize and transform the organization-specific SAP screen to suit their business needs. It gives you the ability to meet the need for rapid screen changes,delivering improved user experience and increased work efficiency.

    2.1 Software Units of SAP Screen Personas 2.0

    The following software units are of relevance when setting up the solution:x SAP NetWeaver 7.0 or enhancement packages of 7.0x SAP Kernel

    The solution is based on ITS (Internet Transaction Server) of SAP Kernel and hence requires SAP Kernel withrelease 721 as installation basis.

    x SAP Basis (SAP_BASIS)The solution is an add-on and hence relies on any of the below mentioned Software components asinstallation basis:

    Component Release Support Package

    SAP_BASIS 700 SAPKB70017

    SAP_BASIS 701 SAPKB70102

    SAP_BASIS 702 SAPKB70200

    SAP_BASIS 731 SAPKB73100

    For Release 702 and 731, no specific support package is required.

  • 10PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Solution Overview

    2.2 System Landscape

    Since there are two components to this solution, the system landscapes for both the components of SAP ScreenPersonas 2.0 are given below.

    2.2.1 SAP Screen Personas based on Silverlight

    There are two types of system landscape for this solution.Single System Landscape (Minimal System Landscape)In this scenario, there is only one system in the system landscape. The add-on is installed on the same system.When a user launches Personas in a web browser, the request is received and processed by this system. Flavorscan be created for any GUI transaction in this system and assigned to users/groups.

    Figure 1

    Multiple-System Landscape (Productive System Landscape)In this scenario, there is more than one system in the system landscape. The add-on can be installed on one of thesystems, which then becomes the main system for Personas. When user launches Personas, in a web browser,the request is received and processed by the main system. On successful login to the main system, a systemselection page is presented with all the systems in which the user has a user profile created. The user can selectthe system and login to it. Users can then create flavors for transactions in any of the connected system includingthe main system. However, all master data related to Personas like Groups, User profiles, Flavors etc. are storedin the main system.

  • SAP Screen Personas 2.0Solution Overview

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 11

    Figure 2

    CautionWe strongly recommend that you use a minimal system landscape for test and demo purposes only. Forperformance, scalability, high availability, and security reasons, do not use a minimal system landscapeas your production landscape.

    2.2.2 SAP Screen Personas based on HTML

    Figure 3The SAP Screen Personas 2.0 is an add-on installed on the system that needs to support personalization ofDynpro screens. The UI is rendered on the client browser by SAP GUI for HTML (ITS). The ITS routes all requests

  • 12PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Solution Overview

    for flavor retrieval and updates to this add-on via the GUI Manager that is part of SAP Basis. The ITS also interactsdirectly with SAP Screen Personas add-on for retrieval of media files.

    Note:Currently, SAP Screen Personas 2.0 HTML version is only supported on SAP Basis 740 or above.The following are the only browsers supported for SAP Screen Personas HTML version:o Internet Explorer 9 and 10 (Note: IE should run only in standards mode. Compatibility / Quirks mode

    is not supported)o Chrome (use latest version - version 26 or above)o Firefox (version 20 or above)

    CautionWe strongly recommend that you use a minimal system landscape for test and demo purposes only. Forperformance, scalability, high availability, and security reasons, do not use a minimal system landscapeas your production landscape.

    2.3 Authorization and Role Concepts - Silverlight

    SAP Screen Personas uses two kinds of Authorization management one used for accessing the administrationtransaction and the other which is used for user permission management in the Silverlight UI.Assign Admin AuthorizationsAn Admin authorization is required for Admins to access the Admin Transaction. A backend role/PERSOS/ADMIN_ROLE can be used to give sufficient authorizations to the Administrator. This enables him/herto access transaction /PERSOS/ADMIN_UI where admin can do various activities like User Management, FlavorManagement, and Group Management etc. More details about these activities can be found in the SAP Librarydocumentation.Maintain Main and Target System ListThis can be done in this link SPRO > SAP Customizing Implementation Guide > Cross-Application Components >SAP Screen Personas > Maintain Systems.SAP Screen Personas can be installed in a central system (termed as Main system) and be connected to be usedwith other systems (Target systems). Both the Main and the Target Systems need SAP Kernel 7.21 and theSystem settings.In the SPRO Node, maintain the system Details like System ID, Client, Description, Connector to SAP System. TheValue for Connector to SAP System is always ITS. Once the user enters all values and click on enter, a GUID isgenerated in the System Config ID which will be used as the unique ID for any System Client configuration.Once the System Details are maintained, select the row and double click on the System Settings on the left sidenavigation. This takes you to the Parameter Maintenance screen for each system. Maintain the followingparameters under System settings:Service.Uri Please maintain the service name for accessing SAP Screen Personas here. The default service is/restgui.Server.Url Please maintain the server link for the system here. For example:https://ldfss600.pal.ess.corp:50015

  • SAP Screen Personas 2.0Solution Overview

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 13

    Get URL to Access Personas from the Installed SystemPersonas can be accessed from the users PC using a shortcut URL. As an Administrator, you can generate thisURL by following the steps given below:1. Goto transaction SICF.2. Select the following filters and press execute.

    a. Hierarchy Type - SERVICEb. Service Path - /sap/bc/bsp/persos/mainapp/

    3. Select "mainapp" service, right click and click on test service.A GUI Security dialog pops up.4. Select Allow this one time and click ok.You would be taken to the personas application in the default browser window.This URL can be used as a shortcut to access Personas.

    Maintain RolesBackend Authorization Management is implemented using SAP Standard Roles and Authorization framework.By default the following 5 roles are delivered:x Rendering only (0)

    o IT pre-defines the flavor to be loaded for a user/groupo No flavor switching possible

    x Rendering and flavor switching (1)o User can switch between flavors and get new ones from the Flavor Gallery.o No private flavors, therefore, no editing possible

    x Rendering, visual editing and sharing of flavors (Bits 0-5, and 8-13)(16191)o User is able to create private flavors, edit, and share them.

    x Restricted editing (All bits but bit 22) (29360127)o Most editing features except the advanced scripting

    x Full editing rights (-1).In addition, the administrator can come up with new roles. More information on Roles is provided in the relatedIMG document in the Solution Manager documentation.The following table lists down the different User Permissions per bit position.

    Permission Bit Name PermissionBit Number

    PermissionBit Mask

    Description Requires

    AccessToProfileFlavors 0 0x1 Allows switchingbetween flavorsthat are part of theprofile

    AccessToSharedFlavors 1 0x2 Allows searching forflavors and addingthem to the profile,as well as setting adefault

  • 14PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Solution Overview

    Permission Bit Name PermissionBit Number

    PermissionBit Mask

    Description Requires

    AllowEdit 2 0x4 Allows user to enteredit mode and copyflavors

    AccessToSharedFlavors

    AllowGroup 3 0x8 Allows user togroup controls andchange Z-Index

    Requires AllowMove &AllowResize forgroup/ungroup.RequiresAllowEditLabels orAllowEditComboBoxes ifthey participate inGroup/Ungroup

    AllowMove 4 0x10 Allows user to movecontrols

    AllowResize 5 0x20 Allows user toresize controls

    AllowHide 6 0x40 Allows user to hideand show controls

    AllowMandatory 7 0x80 Allows user tochange inputs tooptional/mandatory

    AllowBackgroundImages 8 0x100 Allows user toupload and setbackground images

    AllowRecolor 9 0x200 Allows user to setcolor of controls

    AllowCreatePostItNote 10 0x400 Allows creatingPostIt notes

    Requires AllowMove &AllowResize

    AllowCreateImage 11 0x800 Allows creatingimage controls

    Requires AllowMove &AllowResize

    AllowCreateGroupBox 12 0x1000 Allows creatinggroup box controls

    Requires AllowMove &AllowResize

    AllowCreateLabel 13 0x2000 Allows creatinglabel controls

    Requires AllowMove &AllowResize &AllowEditLabels

    AllowCreateLauchButton 14 0x4000 Allows creatinglaunch buttoncontrols

    Requires AllowMove &AllowResize

    AllowCreateScriptButton 15 0x8000 Allows creatingscript buttoncontrols and

    Requires AllowMove &AllowResize

  • SAP Screen Personas 2.0Solution Overview

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 15

    Permission Bit Name PermissionBit Number

    PermissionBit Mask

    Description Requires

    recording of scripts

    AllowCreateHtmlControl 16 0x10000 Allows creatingHTML controls

    Requires AllowMove &AllowResize

    AllowCreateTextBox 17 0x20000 Allows creating textbox controls

    Requires AllowMove &AllowResize

    AllowConvertInput 18 0x40000 Allows convertinginputs

    AllowConditionalFormatting 19 0x80000 Allows settingconditionalformatting

    AllowEditComboBoxes 20 0x100000 Allows editingcombo boxes

    AllowEditLabels 21 0x200000 Allows editing labelcontrols

    AllowAdvancedScripting 22 0x400000 Allows usingWebRFC andJavaScript actionsas part of the ScriptButton

    RequiresAllowCreateScriptButton

    AllowCreateCheckBox 23 0x800000 Allows creatingCheck Boxes

    AllowEditButtons 24 0x1000000 Allows changinglabels and icons ofbuttons

    ShowBasicView 25 0x2000000 Show basic view foruser.

  • 16PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Solution Overview

    2.4 Authorization and Role Concepts - HTML

    SAP Screen Personas 2.0 HTML will be enabled for a user, only when the relevant authorizations using the PFCGtransaction are provided. This is essential as without the necessary authorizations, the solution is not enabled fora user.

    2.4.1 Role Creation using PFCG

    Roles can be created using transaction PFCG and then assigned to the user. It has to be ensured that theauthorization object /PERS/AOBJ is attached to the role and maintained. This authorization object uses threeparameters described below.

    Parameter Descriptionx Transaction Code: This limits/filters activities to a specific transaction. Wild cards are allowed, for example

    * to indicate all transactions. You can specify multiple transaction codes separated by a comma.x Flavor ID: This limits an activity to one flavor, or a pattern of flavor identifiers. Multiple flavor patterns are

    separated using comma.

    NoteIt is mandatory to grant authorization rights to the static flavor ID SAP_PERSONAS.

    x Activity: The activity for which a specific authorization check is done.

    There are seven activities that are allowed for a role. These activities have an increasing level of privilege. Givenbelow is a table consisting of different roles.

    NoteIt is mandatory to assign all lower privilege level activities also to the role.

  • SAP Screen Personas 2.0Solution Overview

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 17

    Role Privilege Level Activity Description

    USE 1 16/Execute The user is allowed to seeand use the specificflavor.

    SWITCH 2 03/Display The user is allowed toswitch between a set ofavailable flavors.

    RESHARE 3 78/Assign If the user has a numberof predefined flavors(shared with this user),then the user can re-share his flavors withother users.

    THEMING 4 A3/Change Status The user is allowed toupdate the theme.

    EDIT 5 02/Change The user is allowed tocreate and maintainflavors.

    SHARE 6 59/Distribute The user is allowed toshare own flavors withother users.

    ADMIN 7 70/Administrate The user is allowed toadminister flavors.

    NoteIn addition to the role, ensure that while accessing the SAP GUI for HTML, the URL parameter sap-ie=edge is included in the URL. Without this parameter, the solution will not be enabled on the UI even ifthe necessary authorizations are provided.For example:...webgui?sap-ie=edge&

  • 18PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Solution Overview

    2.5 Overall Implementation Sequence

    Purpose

    The following table describes the overall installation sequence for SAP Screen Personas 2.0. This table containsall available software units.

    Process

    Implementation Sequence

    Step Action[Required Documentation]

    Remarks/Subsequent Steps

    1 Installation of Kernel 7.21 Kernel 7.21 is pre-requisite for SAPScreen Personas.

    2 Installation of SAP Personas 2.0 Addon This step installs the SAP ScreenPersonas 2.0 solution

    3 Installation of relevant notes

    4 Activation of SAP Screen Personas 2.0 (HTML)

  • SAP Screen Personas 2.0Business Scenarios of SAP Screen Personas 2.0

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 19

    3 Business Scenarios of SAP ScreenPersonas 2.0

    The following business scenarios are available for SAP Screen Personas 2.0.

    3.1 UI Customization

    Overview

    In this business scenario, the system is customized in order to enable the admin user to perform necessaryactivities that will allow the business user to use this solution.Under this business scenario, the following business processes are provided:5. Performing Administration Tasks

    You can user this process to perform the administrator tasks like maintaining users, flavors, user groups,mass users, mass groups, and so on.

    6. Managing FlavorsYou can use this process to transport objects, export, and import flavors.

    For information about technical system landscape, software units, and implementation sequence, see section 2,Solution Overview.

    Further Information

    The following documents provide more information about UI Customization.

    Content Location

    Business Scenario and ProcessDocumentation

    See the documentation in SAP Solution Manager.

    Configuration Documentation See the documentation in SAP Solution Manager.

  • 20PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Solution-Wide Topics

    4 Solution-Wide Topics

    SAP provides the SAP Solution Manager as the highly recommended platform to efficiently support theimplementation of your solution. Using SAP Solution Manager will significantly accelerate the implementationprocess and help you to achieve your business goals. At the same time, SAP will be able to deliver supportservices based on the business scenarios designed and documented in SAP Solution Manager. Implementationcontent for your solution may further accelerate the implementation process.For information about availability of content specifically tailored to SAP Screen Personas 2.0, see the SAPSolution Manager Business Process Repository on SAP Service Marketplace at http://service.sap.com/bpr. Onthe right page, follow the link provided in the section Available implementation content.The Solution Manager content for SAP Screen Personas 2.0 is delivered via the support package SP38, which isavailable from SAP Software Distribution Center at http://service.sap.com/swdc.For more information about SAP Solution Manager, see SAP Service Marketplace athttp://service.sap.com/solutionmanager.

  • SAP Screen Personas 2.0Security Considerations

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 21

    5 Security Considerations

    This section provides an overview of the security considerations that are specific to the SAP Screen Personassolution. The solution is based on SAP NetWeaver 7.0 with SAP Kernel 7.21. Therefore, the corresponding securitysettings also apply to this solution.

    5.1 Fundamental Security Guides

    For a complete list of the available SAP security guides, see SAP Security Guides on SAP Service Marketplace athttp://service.sap.com/securityguide. The current version of the SAP NetWeaver security guide, which dealswith general security issues, is also available via this quick link.

    Additional Information

    For more information about specific security topics, see the following locations on SAP Service Marketplace:

    Content Location

    Security http://service.sap.com/security

    Security Guides http://service.sap.com/securityguide

    Released Platforms http://service.sap.com/platforms

    Network Security http://service.sap.com/securityguide

    Infrastructure Security http://service.sap.com/securityguide

    SAP Solution Manager http://service.sap.com/solutionmanager

    5.2 Security-Relevant Logging and Tracing

    Solution uses the underlying softwares user management and administration framework.

    5.3 Dispensable Functions with Impacts on Security

    All functions delivered as part of the solution are necessary.

  • 22PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Operations Information

    6 Operations Information

    This chapter contains important information on how to smoothly operate SAP Screen Personas. The major topicsare monitoring, administration, software change management, and high availability. This chapter describes thetasks to execute and the tools to use.SAP Screen Personas can be installed on any SAP system. Therefore, the general operations information that iscovered in the related Operations Guides also applies to SAP Screen Personas. For more information aboutrelated guides, see the corresponding resources on SAP Service Marketplace athttp://service.sap.com/instguidesFor a complete list of available SAP Operations Guides, see SAP Service Marketplace athttp://service.sap.com/instguides.The operations information specific to SAP Screen Personas is described in the following chapters. The followingareas are covered:x Administration and Managementx Software Change Management

    6.1 Administration and Management

    All the backend operations like User Management and Flavor Management are to be performed by theAdministrator. The Application Help defines in detail the functionality and steps to perform these operations.Please refer to the Application Help in Service Market Place under SAP Screen Personas.

    6.1.1 Periodic Tasks

    Administrator would be assigning System and Roles to users as and when a new user is added. He would also beresponsible for Group creation and assigning users and flavors to groups. In addition, he also sets a Global groupthrough which he can distribute flavors to all users.

    6.1.2 User Management

    There is no separate User Management for SAP Screen Personas. To access SAP Screen Personas, users shouldhave SAP user access to the system in which SAP Screen Personas is installed. In order to login to other targetsystems which are connected to the Main system, a user is required there too. For details on User AuthorizationManagement in the backend and User Role and Permissions, refer to the Solution Manager document.

  • SAP Screen Personas 2.0Operations Information

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 23

    6.2 Software Change Management

    SAP Screen Personas 2.0 is delivered as an Add-On and can be installed using SAINT. Detailed steps forinstallation can be found in the installation Note 1776739.

  • 24PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0References

    7 References

    List of Documents

    The following table lists all documents mentioned in this Master Guide.

    Title Where to Find

    Solution Manager http://service.sap.com/solutionmanager

    SAP Screen Personas 2.0 ConfigurationGuide

    http://service.sap.com/instguides Focused Business Solutions SAP Screen Personas 2.0

    Application Help for SAP Screen Personas2.0

    http://help.sap.com/personas

    List of SAP Notes

    The following table lists all SAP Notes mentioned in this Master Guide.

    SAP Note Number Title Description

    1776739 Installation Note for SAPScreen Personas 2.0

    This note lists the Prerequisites andrelated details about Installing SAPScreen Personas 2.0.

    1848339 Installation and Upgrade note forSAP Screen Personas(Silverlight)

    This note contains information on thesteps for installing and getting startedfor both new and existing customers.

    1885334 Feature List for Silverlight This note contains information relatedto the modifications made to some ofthe features in SAP Screen PersonasSilverlight 2.0.

  • SAP Screen Personas 2.0Media List

    PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved. 25

    8 Media List

    All deliverables for SAP Screen Personas 2.0 are shipped electronically. The software and documentationdownload package is available on SAP Service Marketplace at http://service.sap.com/swdc Support Packagesand Patches A - Z Index PSAP Screen Personas 2.0.

  • 26PUBLIC 2013 SAP AG or an SAP affiliate company. All rights reserved.

    SAP Screen Personas 2.0Release Availability Information

    9 Release Availability Information

    For more information about currently available releases for the SAP Screen Personas solution, and for eachrelease, the SAP standard software required to install and use the solution, seehttp://www.service.sap.com/fbs/availability.

  • www.sap.com/contactsap

    2013 SAP AG or an SAP affiliate company. All rights reserved.No part of this publication may be reproduced or transmitted in anyform or for any purpose without the express permission of SAP AG.The information contained herein may be changed without priornotice.Some software products marketed by SAP AG and its distributorscontain proprietary software components of other softwarevendors.National product specifications may vary.These materials are provided by SAP AG and its affiliatedcompanies (SAP Group) for informational purposes only, withoutrepresentation or warranty of any kind, and SAP Group shall not beliable for errors or omissions with respect to the materials. The onlywarranties for SAP Group products and services are those that areset forth in the express warranty statements accompanying suchproducts and services, if any. Nothing herein should be construed asconstituting an additional warranty.SAP and other SAP products and services mentioned herein as wellas their respective logos are trademarks or registered trademarks ofSAP AG in Germany and other countries. Please seewww.sap.com/corporate-en/legal/copyright/index.epx#trademarkfor additional trademark information and notices.

    1 Getting Started1.1 About this Document1.2 Related Information1.2.1 Planning Information1.2.2 Further Useful Links1.2.3 Related Master Guides

    1.3 Important SAP Notes

    2 Solution Overview2.1 Software Units of SAP Screen Personas 2.02.2 System Landscape2.2.1 SAP Screen Personas based on Silverlight2.2.2 SAP Screen Personas based on HTML

    2.3 Authorization and Role Concepts - Silverlight2.4 Authorization and Role Concepts - HTML2.4.1 Role Creation using PFCG

    2.5 Overall Implementation Sequence

    3 Business Scenarios of SAP Screen Personas 2.03.1 UI Customization

    4 Solution-Wide Topics5 Security Considerations5.1 Fundamental Security Guides5.2 Security-Relevant Logging and Tracing5.3 Dispensable Functions with Impacts on Security

    6 Operations Information6.1 Administration and Management6.1.1 Periodic Tasks6.1.2 User Management

    6.2 Software Change Management

    7 References8 Media List9 Release Availability Information